Aechelon Technology, Inc. is a leading producer of 3D simulator content, including geo-specific visual/sensor databases and realistic 3D models. We seek people who share our passion for real time computer graphics, and commitment to our mission of helping make our nation’s pilots safer. We will give you a chance to work with some of the most talented people in the graphics industry.

Our Company is a leader in the Simulation & Training industry, and we pride ourselves in providing innovative solutions. We are committed to providing the best products for our nation's pilots and the defense industry.

We are seeking a motivated Junior Security Analyst to join our IT team. This individual will take direction from senior team members to help safeguard our information systems, support compliance with cybersecurity frameworks such as NIST 800-171 and CMMC, assist with optimizing our security technologies, and contribute to proactive and effective security practices across the organization. This is a fully remote position that requires a willingness to learn and develop cybersecurity skills in a dynamic environment.

Primary Duties and Responsibilities

Compliance Management
Assist in achieving and maintaining compliance with NIST 800-171 and CMMC standards.
Help manage System Security Plans (SSPs) and Plans of Action and Milestones (POAMs) under the guidance of senior team members.
Collaborate with internal teams to implement required security controls.
Metrics and Reporting:
Help generate security metrics and reports, such as incident response times, vulnerability trends, and compliance progress.
Provide insights on security trends and suggest improvements to strengthen the overall security posture.
Third-Party Risk Management:
Assist in conducting third party risk assessments and evaluate vendor security controls.
Work with vendors to address identified risks under the supervision of senior staff.
Security Monitoring and Incident Response:
Utilize Microsoft Defender, Intune, and other tools to monitor and manage endpoint and network security.
Respond to security incidents as directed, supporting investigations and remediation efforts.
Review logs from Active Directory, Entra ID, firewalls, and Linux systems to investigate incidents.
Email Security and Threat Management
Support management and monitoring of Proofpoint for email filtering and protection against phishing, malware, and spam.
Assist with implementing and maintaining email security policies.
Network and Cloud Security
Assist with configuring and maintaining Palo Alto firewalls and ensuring secure connectivity.
Support Security efforts for cloud environments, including Azure AD and Microsoft 365.
Vulnerability and Risk Management
Conduct vulnerability scans and assist in remediation efforts using integrated tools within the M365 ecosystem.
Work with the team to remediate identified vulnerabilities effectively.
Threat Intelligence and Proactive Monitoring
Research emerging threats and vulnerabilities as directed, contributing to proactive defense strategies.
Stay updated on the latest security trends to enhance defensive measures and reduce risks.
Automation and Process Optimization:
Assist in leveraging security automation tools to streamline processes such as alert triage and log analysis.
Help identify and implement opportunities for automation under guidance.

Experience Required for this position:

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
Familiarity with Security tools within the Microsoft 365 ecosystem (e.g., Defender, Intune).
Basic understanding of Proofpoint email filtering and Palo Alto Firewalls is a plus
Willingness to learn SIEM tools, vulnerability scanners, and compliance platforms.
Must be able to obtain and maintain a classified Security Clearance
Strong problem-solving skills with attention to detail.
Excellent verbal and written communication skills, with the ability to explain technical concepts to non-technical stakeholders.

Desired Competences:

1+ year of experience in cybersecurity or a related field is preferred but not required.
Certifications such as CompTIA Security+, Microsoft Certified: Security, Compliance, and Identity Fundamentals, or Certified CMMC Associate are a plus
Stay current on emerging cybersecurity threats, compliance requirements, and evolving security technologies
Ability to manage multiple priorities effectively in a remote work environment
Demonstrated integrity and sound judgment when handling sensitive information